Rush,
Thank you. What you described matches my experience. Can you imagine an alternate way I can configure the SRX100 so that I can access the administrative interface (SSH or web) via an ipsec tunnel -- even when there is only one physical cable plugged into fe-0/0/0 (to provide the internet/encrypted side of the tunnel)?
Thank you again,
Chris